Skip to content
Project Blue Book Plaintext Readable by you

DekkoCORE · Follow a project

Five organisations, one project. Nothing exposed.

Project Blue Book is PROTECTED work shared between a government department, a partner agency, a defence prime, its subcontractor and outside counsel. Follow it from the first invite to the final signature: every file, message, meeting and approval, readable only by the people on it.

Government departmentPartner agencyDefence primeSubcontractorOutside counselPROTECTED
0Organisations on the project
0Encryption keys we hold
Scroll to follow the project

What other platforms rely on

Most "secure" platforms can still read your files.

Capability brief · Project Blue Book

PROTECTED · Capability division
1. Requirement

A deployable maritime surveillance capability, with initial operating capability in 2027. Statement of requirement at A1.

2. Threat context

Summary only. The full assessment is held at a higher classification and is not attached.

Hardware security modules

Keys sit in hardware you buy, rack and maintain. The platform still decrypts files on its servers.

Platform servers

Bring your own key

You hold the master key. The service still uses it to decrypt whenever it needs to read them.

The service, with your key

Private cloud & on-prem

Dedicated infrastructure to deploy, patch and staff. Readable files sit on servers you now defend.

Admins · anyone who gets in

Encryption add-ons

They sit on top of another cloud. Files, metadata and admin access stay with the host service.

Dropbox · SharePoint · Drive
The test: can the provider, its cloud host or your own administrators read a file without a user's key?
With DekkoCORE, no one can.

Zero-knowledge

We built a vault we can't open.

01

Encrypted before upload

Files are encrypted on the sender's device. They're never sent or stored in readable form.

02

Sealed in transit and at rest

Servers in your chosen country hold only ciphertext.

03

Keys handled automatically

Users never see or manage them. DekkoSecure never has one.

04

Opened by the recipient only

Files are decrypted on the recipient's device as they open them.

Sender · Government departmentSally Smith
keys: on device
capability_brief.pdf
Capability brief, Project Blue Book. PROTECTED. Requirement, threat summary, schedule and handling for cleared staff only.
Encrypted on this device
Sovereign regionDekkoCORE servers
AUUSCA
AU-1
AU-2
What we hold
—
Keys held 0
Plaintext seen Never
Can decrypt No
Recipient · Defence primeProgram manager
keys: on device
capability_brief.pdf
Waiting for share…
Decrypted on this device
Servers only ever handle ciphertext No HSMs, key servers or key ceremonies No plug-ins: it runs in the browser

capability_brief.pdf

The same file, on your screen and on our servers.

Capability brief · Project Blue Book

PROTECTED · Capability division · Issued 14 October
1. Requirement

A deployable maritime surveillance capability, with initial operating capability in 2027. Statement of requirement at A1.

2. Threat context

Summary only. The full assessment is held at a higher classification and is not attached.

3. Schedule

Tender responses close 30 November. Shortlisted suppliers present in January.

4. Handling

PROTECTED. Share only with cleared staff named in the Hub. Do not email or print.

Attachments
A1Statement of requirement24 pp
A2Threat assessment · summary6 pp
A3Interface control document41 pp
A4Technical data package2.1 GB
A5Security plan12 pp
A6Delivery schedule8 pp
A7Test and evaluation plan19 pp
A8Supplier security questionnaire15 pp
A9–14Annexes6 files
Sally Smith · Capability divisionPage 1 of 12
What you see What we see
⇆

One sealed space

Everything your team shares, in one sealed space.

01

Hubs & files

Every project in its own secure Hub. Upload files and folders, with status tags like Review and Signed.

02

Sharing

Seven permission levels, from listing only to full permissions, plus expiry dates and instant revocation.

03

Signing

eSignatures are end-to-end encrypted, the same way files are.

04

Co-editing

Work on the same document together.

05

Viewing

Open files in the browser, with nothing to install.

06

Secure mail

Messages are end-to-end encrypted, the same way files are.

07

Meetings

Video meetings are end-to-end encrypted too.

08

Classification

Mark files and Hubs with their classification.

09

File history

See every version and who made it.

Project Blue BookFusion HubEnd-to-end encrypted
PROTECTED
capability_brief.pdfPROTECTEDReview
access_review.docxPROTECTEDDraft
trial_footage_range3.mp4PROTECTED12.4 GB
tech_data_package.zipPROTECTED48 GB
subcontract_SOW.pdfPROTECTEDAwaiting signature
Upload to Project Blue Book
Drop files or folders
No file size limits
tech_data_package.zip · 48 GB
Attachments/ · 14 files
Share capability_brief.pdf
SSMJPM
List only1
View2
Download3
Upload4
Edit5
Share6
Full permissions7
Sign subcontract_SOW.pdf

Morgan Jones · signed in DekkoCORE
SIGNED
access_review.docx · 3 editing
Access review, Q3. Scope covers all Hubs in the
Capability tenancy and every external partner.
Finding 1: two dormant accounts were revoked.
Finding 2:
Sally Morgan Oliver
trial_footage_range3.mp4 · viewing
MORGAN JONES · VIEW ONLY · 14:02
MORGAN JONES · VIEW ONLY · 14:02
MORGAN JONES · VIEW ONLY · 14:02
00:04:12Opened in the browser
New secure message
ToProgram manager (defence prime)
SubjectProject Blue Book capability brief
Brief attached. The technical data package is in the Hub. Can your team confirm clearances before Thursday?
End-to-end encrypted · same as files
Blue Book stand-up
SSSally
MJMorgan
OLOliver
PMPrime
End-to-end encrypted meeting
Classification · Project Blue Book
UNOFFICIAL
OFFICIAL
OFFICIAL: Sensitive
PROTECTED
History · capability_brief.pdf
v1CreatedSS
v2Attachments addedMJ
v3Recommendation editedSS
v4Status → ReviewOL
v5Shared with the primeMJ

Invisible

The strongest security is the kind nobody has to think about.

01

Receive an invite

Someone shares a Hub or a file with you.

SS
Sally Smith invited youto Project Blue Book
Accept invite
02

Create an account

Sign up with a passkey or TOTP MFA. Your keys are created in the background.

Name
Passkey
Authenticator app (TOTP)
Create account
03

Collaborate

Upload, edit and share as you normally would.

capability_brief.pdfSSMJOL
access_review.docxMJOL
keys created on device

Handled automatically by the platform

  • Key generation
  • Public key infrastructure
  • Key exchange between users
  • E2E encryption of every file & message

What nobody ever has to do

  • Back up keys by hand
  • Manage certificates
  • Choose encryption settings
  • Remember extra steps
  • Sit through security training

AI-resistant

AI changes attacks. It doesn't change the maths.

Attacks now move in minutesAI agents can find and exploit software vulnerabilities almost instantly.
Only ciphertext to work withDekkoCORE stores only encrypted data and never has the keys to open it.
Brute force goes nowhereGuessing a key would take all the world's computing power an astronomical amount of time.
ai-agent vs end-to-end encryptionSIMULATED
Age of the universe
Estimated time to brute-force one key

Cryptographic separation

Segregated by design, from organisation to file.

01

Organisation

Organisations are fully segregated.

02

Tenancy

Each tenancy keeps its own policies and hosting region, whoever you work with.

03

Hub

Every project in its own secure Hub.

04

Role

Seven permission levels decide what each person can do.

05

File

Per-user and per-file cryptographic separation. Every file has its own key.

› your-organisation
Organisation

Your organisation

2 tenancies

Tenancy

Capability

2 Hubs

Tenancy

Corporate

3 Hubs

Organisation

Organisation B

Fully segregated

Organisation

Organisation C

Fully segregated

Organisation

Organisation D

Fully segregated

Tenancy · hosted in AU

Capability

2 Hubs · enforced 2FA & passkeys

Core Hub

Project Kestrel

Fusion Hub

Project Blue Book

Tenancy · hosted in AU

Corporate

3 Hubs · its own policies

Board papersHR caseworkContracts
Separate members, separate keys. Capability can't see in, and Corporate can't see out.
Core Hub

Project Kestrel

Different members, different keys

6 members41 filesReview: 3
Members of Project Blue Book can't open Kestrel's files unless they're invited to it too.
Fusion Hub

Project Blue Book

4 members · 5 files

SS
Sally SmithOwner
MJ
Morgan JonesEditor
OL
Oliver LeeViewer
SS
Sally SmithOwner · full permissions
ListViewDownloadUploadEditShareFull
Invites members, sets expiry dates and revokes access.
MJ
Morgan JonesEditor · Project Blue Book
List only
View
Download
Upload
Edit
Share
Full permissions
Edited access_review.docx2 hours ago
Uploaded 2 files to Attachments/Yesterday
Signed subcontract_SOW.pdfMonday
Can edit and upload. Can't share outside the Hub.
OL
Oliver LeeViewer · expires 30 Jun
ListViewDownloadUploadEditShareFull
Reads in the browser. Access ends on 30 June, or sooner if it's revoked.
Morgan Jones · Project Blue Book

Every file, its own key

capability_brief.pdfk·7f3a…
access_review.docxk·c18e…
trial_footage_range3.mp4k·09bd…
tech_data_package.zipk·e45f…
subcontract_SOW.pdfk·5a02…
capability_brief.pdf is shared with the prime: its key is wrapped for each cleared person, and nothing else changes.

The network

One secure platform, with everyone already connected.

01

One account, every collaboration

Work with any organisation on the network from the account you already have.

02

Every member strengthens the network

Your next partner may already be on DekkoCORE.

03

Secure from the first invite

New collaborators are protected as soon as they accept.

04

Shared platform, separate control

You keep your own tenancy and hosting region, whoever you work with.

0+Government agencies
0+Private organisations

Data sovereignty

Your data stays in your country.

Choose where your tenancy is hosted. Servers in that country hold only ciphertext.

HOSTED IN-COUNTRYAU

Australia

IRAP · PROTECTED
HOSTED IN-COUNTRYCA

Canada

ITSG-33 ALIGNED
HOSTED IN-COUNTRYUS

United States

ITAR READY
IRAP assessed to PROTECTEDIndependently assessed under the Australian Government's Information Security Registered Assessors Program.
Data centre compliance
ISO/IEC 27001ISO/IEC 27017ISO/IEC 27018SOC 1SOC 2 TYPE IISOC 3FEDRAMP HIGHCSA STARPCI DSSISO/IEC 27001ISO/IEC 27017ISO/IEC 27018SOC 1SOC 2 TYPE IISOC 3FEDRAMP HIGHCSA STARPCI DSS
PCI DSSCSA STARFEDRAMP HIGHSOC 3SOC 2 TYPE IISOC 1ISO/IEC 27018ISO/IEC 27017ISO/IEC 27001PCI DSSCSA STARFEDRAMP HIGHSOC 3SOC 2 TYPE IISOC 1ISO/IEC 27018ISO/IEC 27017ISO/IEC 27001

Independently verified and fully accountable.

Independently tested

Independent third parties test our security claims.

Proven encryption standards

Established, publicly scrutinised cryptography, with no home-grown or proprietary algorithms.

We welcome scrutiny

Put us through your security review.

See DekkoCORE working on your own workflows. We'll show you how teams like yours replace email, FTP and consumer cloud within days.

Speak with a security expert